EUVD-2026-82778

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise...

CVE-2026-56590

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability caused by improper file validation controls. An unauthenticated attacker can upload and execute malicious payloads, potentially leading to complete server compromise . The CNA-assigned CVSS 3.1 score is 6.4 (ME...

CVE-2026-6205

An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write arbitrary files and conduct denial-of-service attacks...

EUVD-2026-82777

An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write arbitrary files and conduct denial-of-service attacks...

CVE-2026-6205

CVE-2026-6205 is an external control of file name or path vulnerability in the Upload API of Synology DiskStation Manager (DSM) prior to versions 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4, and 7.4-90075. It allows remote authenticated users to write arbitrary files and conduct denial-of-servic...

CVE-2026-6205

An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write arbitrary files and conduct denial-of-service attacks...

libhevc:hevc_dec_fuzzer: Index-out-of-bounds in ihevcd_iquant_itrans_recon_ctb

Project: https://android.googlesource.com/platform/external/libhevc https://github.com/ittiam-systems/libhevc.git Detailed Report: https://oss-fuzz.com/testcase?key=6672083674005504 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerubsanlibhevc Platform Id:...

Vol3xp

Vol3xp، إضافات مستكشف Volatility 3 WinObj - مستكشف كائنات نواة ويندوز، تحسين لـ https://github.com/kslgroup/WinObj لـ volatility 3 winobj.py WinObj مشابه جدًا لـ WinObj sysinternals كما يدعم محلل الهياكل و WinObjGui من VolExp. RAMMap - تعيين العناوين الفيزيائية pfn.py RAMMap مشابه جدًا لـ Rammap...

python-inquestlabs

RETIRÉ novembre 2025 inquestlabs Une interface Pythonique et un outil en ligne de commande pour interagir avec l'API InQuest Labs. Notez qu'une clé API n'est pas requise pour interagir avec cette API. Une clé API permet toutefois d'augmenter la fenêtre de recherche lookback, de supprimer les...

CVE-2026-15004

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 6.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

crackerjack

!CAUTION Ce dépôt n'est plus maintenu, visitez https://github.com/sadreck/crackerjack pour la dernière version. CrackerJack Interface Web pour Hashcat par Context Information Security Sommaire Introduction Architecture Fonctionnalités Limitations Installation Dépannage Captures d'écran Licence...

setup-wordpress-with-security-best-practice

إعداد ووردبريس مع أفضل ممارسات الأمان تمت كتابة هذا المستند بهدف أن يكون مناسبًا لتطبيقات الويب المطورة باستخدام ووردبريس والتي لا تتفاعل مع المستخدمين. وهو مخصص بشكل أساسي لصفحات العلامات التجارية للشركات، وطرق العرض الثابتة المختلفة، وصفحات التوظيف، والمواقع المماثلة. بالنسبة للمواقع الإلكتروني...

CVE-2021-41773

CVE-2021-41773 Projet PoC&Exp en Go. Déclaration : Ce projet provient des notes d'étude quotidiennes de l'auteur. Ne pas utiliser les technologies et outils associés pour des tests illégaux. L'auteur décline toute responsabilité en cas de conséquences néfastes. Utilisation : root@kitploit: ./main...

gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...

CVE-2024-4883

CVE-2024-4883 PoC pour CVE-2024-4883 Progress WhatsUp Gold WriteDatafile - Exécution de code à distance sans authentification CVE-2024-4883 Analyse Technique Une analyse de la cause première de la vulnérabilité est disponible sur mon blog :...

poro

should be the entire markdown in Arabic. Let me write the translation line by line. poro الوصف افحص عن الأصول القابلة للوصول العام في بيئة AWS الخاصة بك الخدمات التي يغطيها هذا الأداة: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases يقوم Poro أيضًا بالتحقق مما إذا كا...

IP-reputation-snort-rule-generator

IP-reputation-snort-rule-generator Инструмент для генерации правил Snort или сигнатур Cisco IDS на основе данных общедоступных репутаций IP-адресов/доменов Выпущен в качестве открытого исходного кода компанией NCC Group Plc - http://www.nccgroup.com/ Разработан Уиллом Александром, will dot...

jumpserver v5.0.0

An open-source PAM platform Bastion Host English · 中文简体 · 中文繁體 · 日本語 · Português Brasil · Español · Русский · 한국어 What is JumpServer? JumpServer is an open-source Privileged Access Management PAM platform that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes,...

Why-so-Serious-SAM

HiveNightmare 'Fileless' Exploit PoC : Table des matières Vue d'ensemble Fonctionnalités Exemple de simulation en laboratoire Reconnaissance avec Google Dorks Présentation des LOLBins Intégration du dropper sans fichier Exploitation de Print Spooler et HiveNightmare Injection de DLL réfléchissant...

ssct

ShadowSocks ConnecTion Un outil d'encapsulation pour shadowsocks afin de contourner les pare-feux de manière fiable. Démarrage rapide Connexion automatique La façon la plus simple d'utiliser cet outil est de taper ssct dans le terminal, et ssct obtiendra les serveurs shadowsocks disponibles depui...